SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: CAD 127,500 - 159,500 / annual
CircleCI is seeking a Security Operations Engineer to join its Security Operations team, which protects the company's infrastructure, product, and customer data against evolving threats. This intermediate-level role offers meaningful ownership of security challenges and the opportunity to work closely with Engineering as a trusted security partner.
In this role, you will monitor, investigate, and respond to security threats across CircleCI's cloud and application environments using security and AI-assisted tooling. You'll participate in security risk assessments, incident response, post-incident reviews, and rotating on-call support, turning findings into stronger controls and processes.
You will build and maintain security tooling, controls, and automation across cloud, application, and CI/CD environments, following established security patterns and best practices. This includes identifying vulnerabilities and configuration risks, contributing to security runbooks and compliance requirements, and developing a growing understanding of CircleCI's security architecture.
A key aspect of this role involves incorporating AI-powered security tools into day-to-day workflows and helping evaluate emerging technologies that can improve detection, response, and automation. You'll stay current on AI-specific security threats and contribute to responsible approaches for using AI in security operations.
You will partner with Engineering teams to understand security needs, provide practical guidance, and translate technical risks into clear, actionable recommendations. You'll contribute to security roadmap planning, technology evaluations, and team documentation while building strong relationships across Security and Engineering.
CircleCI is the world's largest CI/CD platform, processing more than 3 million jobs a day. The company is venture-backed, founded in 2011, and headquartered in San Francisco with a global remote workforce. Customers include Hinge, HuggingFace, and Samsung.
REQUIREMENTS:
- 3+ years of security engineering or security operations experience, or equivalent demonstrated expertise
- Hands-on experience with cloud, application, and CI/CD security, ideally in AWS, GCP, or Azure environments
- Experience with security incident response and common security tooling, including EDR, CNAPP, SASE, vulnerability scanners, and log analysis
- Ability to build and maintain security automation and tooling, with experience in languages or technologies such as Go, Python, or Terraform
- Strong security judgment and problem-solving skills, with the ability to assess risk, make recommendations, and take action when information is incomplete
- Hands-on experience using AI/ML-powered security tools in a production environment, with an understanding of where AI can improve security workflows and where human judgment remains essential
BONUS SKILLS:
- Familiarity with AI-specific threat categories (prompt injection, model supply chain risks, LLM abuse patterns)
- Experience securing developer platforms, SaaS environments, or CI/CD infrastructure
- Relevant certifications: CEH, AWS Security Specialty, Security+, or equivalent
- Contributions to team process improvement, security runbook development, or internal knowledge sharing
